A Model of Methods Access Authorization in Object-oriented Databases

Nurith Gal-Oz; Ehud Gudes; Eduardo B. Fernandez

A Model of Methods Access Authorization in Object-oriented Databases

Nurith Gal-Oz
, Ehud Gudes
, Eduardo B. Fernandez

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

14 Scopus citations

Abstract

Object-oriented databases are a recent and important development and many studies of them have been performed. These consider aspects such as data modeling, query languages, performance, and concurrency control. Relatively few studies address their security, a critical aspect in systems like these that have a complex and rich data structuring. We developed previously a model of authorization for object-oriented databases which includes a set of policies, a structure for authorization rules and their administration, and evaluation algorithms. In that model the high-level query requests were resolved into read and writes at the authorization level. In this paper we extend the set of access primitives to include ways to control the execution of methods or functions. Policy issues are discussed first, and then algorithms for access evaluation at compile-time and at run-time.

Original language	English
Title of host publication	VLDB 1993 - Proceedings of the 19th International Conference on Very Large Data Bases
Editors	Rakesh Agrawal, Sean Baker, David A. Bell
Publisher	Morgan Kaufmann Publishers, Inc.
Pages	52-61
Number of pages	10
ISBN (Electronic)	155860152X, 9781558601529
State	Published - 1 Jan 1993
Event	19th International Conference on Very Large Data Bases, VLDB 1993 - Dublin, Ireland Duration: 24 Aug 1993 → 27 Aug 1993

Publication series

Name	VLDB 1993 - Proceedings of the 19th International Conference on Very Large Data Bases

Conference

Conference	19th International Conference on Very Large Data Bases, VLDB 1993
Country/Territory	Ireland
City	Dublin
Period	24/08/93 → 27/08/93

Keywords

Database Security
Methods
Object-oriented Security
Object-oriented Systems

ASJC Scopus subject areas

Hardware and Architecture
Information Systems
Software
Information Systems and Management

Cite this

Gal-Oz, N., Gudes, E., & Fernandez, E. B. (1993). A Model of Methods Access Authorization in Object-oriented Databases. In R. Agrawal, S. Baker, & D. A. Bell (Eds.), VLDB 1993 - Proceedings of the 19th International Conference on Very Large Data Bases (pp. 52-61). (VLDB 1993 - Proceedings of the 19th International Conference on Very Large Data Bases). Morgan Kaufmann Publishers, Inc..

Gal-Oz, Nurith ; Gudes, Ehud ; Fernandez, Eduardo B. / A Model of Methods Access Authorization in Object-oriented Databases. VLDB 1993 - Proceedings of the 19th International Conference on Very Large Data Bases. editor / Rakesh Agrawal ; Sean Baker ; David A. Bell. Morgan Kaufmann Publishers, Inc., 1993. pp. 52-61 (VLDB 1993 - Proceedings of the 19th International Conference on Very Large Data Bases).

@inproceedings{7d8286911ffc4f97bb876e6c8699cc54,

title = "A Model of Methods Access Authorization in Object-oriented Databases",

abstract = "Object-oriented databases are a recent and important development and many studies of them have been performed. These consider aspects such as data modeling, query languages, performance, and concurrency control. Relatively few studies address their security, a critical aspect in systems like these that have a complex and rich data structuring. We developed previously a model of authorization for object-oriented databases which includes a set of policies, a structure for authorization rules and their administration, and evaluation algorithms. In that model the high-level query requests were resolved into read and writes at the authorization level. In this paper we extend the set of access primitives to include ways to control the execution of methods or functions. Policy issues are discussed first, and then algorithms for access evaluation at compile-time and at run-time.",

keywords = "Database Security, Methods, Object-oriented Security, Object-oriented Systems",

author = "Nurith Gal-Oz and Ehud Gudes and Fernandez, \{Eduardo B.\}",

year = "1993",

month = jan,

day = "1",

language = "English",

series = "VLDB 1993 - Proceedings of the 19th International Conference on Very Large Data Bases",

publisher = "Morgan Kaufmann Publishers, Inc.",

pages = "52--61",

editor = "Rakesh Agrawal and Sean Baker and Bell, \{David A.\}",

booktitle = "VLDB 1993 - Proceedings of the 19th International Conference on Very Large Data Bases",

address = "United States",

}

Gal-Oz, N, Gudes, E & Fernandez, EB 1993, A Model of Methods Access Authorization in Object-oriented Databases. in R Agrawal, S Baker & DA Bell (eds), VLDB 1993 - Proceedings of the 19th International Conference on Very Large Data Bases. VLDB 1993 - Proceedings of the 19th International Conference on Very Large Data Bases, Morgan Kaufmann Publishers, Inc., pp. 52-61, 19th International Conference on Very Large Data Bases, VLDB 1993, Dublin, Ireland, 24/08/93.

A Model of Methods Access Authorization in Object-oriented Databases. / Gal-Oz, Nurith; Gudes, Ehud; Fernandez, Eduardo B.
VLDB 1993 - Proceedings of the 19th International Conference on Very Large Data Bases. ed. / Rakesh Agrawal; Sean Baker; David A. Bell. Morgan Kaufmann Publishers, Inc., 1993. p. 52-61 (VLDB 1993 - Proceedings of the 19th International Conference on Very Large Data Bases).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

TY - GEN

T1 - A Model of Methods Access Authorization in Object-oriented Databases

AU - Gal-Oz, Nurith

AU - Gudes, Ehud

AU - Fernandez, Eduardo B.

PY - 1993/1/1

Y1 - 1993/1/1

N2 - Object-oriented databases are a recent and important development and many studies of them have been performed. These consider aspects such as data modeling, query languages, performance, and concurrency control. Relatively few studies address their security, a critical aspect in systems like these that have a complex and rich data structuring. We developed previously a model of authorization for object-oriented databases which includes a set of policies, a structure for authorization rules and their administration, and evaluation algorithms. In that model the high-level query requests were resolved into read and writes at the authorization level. In this paper we extend the set of access primitives to include ways to control the execution of methods or functions. Policy issues are discussed first, and then algorithms for access evaluation at compile-time and at run-time.

AB - Object-oriented databases are a recent and important development and many studies of them have been performed. These consider aspects such as data modeling, query languages, performance, and concurrency control. Relatively few studies address their security, a critical aspect in systems like these that have a complex and rich data structuring. We developed previously a model of authorization for object-oriented databases which includes a set of policies, a structure for authorization rules and their administration, and evaluation algorithms. In that model the high-level query requests were resolved into read and writes at the authorization level. In this paper we extend the set of access primitives to include ways to control the execution of methods or functions. Policy issues are discussed first, and then algorithms for access evaluation at compile-time and at run-time.

KW - Database Security

KW - Methods

KW - Object-oriented Security

KW - Object-oriented Systems

UR - https://www.scopus.com/pages/publications/105030488269

M3 - Conference contribution

AN - SCOPUS:105030488269

T3 - VLDB 1993 - Proceedings of the 19th International Conference on Very Large Data Bases

SP - 52

EP - 61

BT - VLDB 1993 - Proceedings of the 19th International Conference on Very Large Data Bases

A2 - Agrawal, Rakesh

A2 - Baker, Sean

A2 - Bell, David A.

PB - Morgan Kaufmann Publishers, Inc.

T2 - 19th International Conference on Very Large Data Bases, VLDB 1993

Y2 - 24 August 1993 through 27 August 1993

ER -

A Model of Methods Access Authorization in Object-oriented Databases

Abstract

Publication series

Conference

Keywords

ASJC Scopus subject areas

Other files and links

Fingerprint

Cite this